Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
File:                     06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft (raw, json)
Hash identifier:          HSet0O0ALWCeWulY6lC4kC291xJUa8bDSZiceW0l4F4=
Subject key identifier:   DA:7F:8E:3D:52:70:0B:14:44:F7:F5:D5:DB:C5:0E:41:F5:24:98:64
Authority key identifier: 06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9
Certificate issuer:       /CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
Certificate serial:       6086E2F87DD0E294220AA75390614B6AB7B46DCC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
Manifest number:          1E
Signing time:             Fri 04 Jul 2025 06:28:35 +0000
Manifest this update:     Fri 04 Jul 2025 06:23:35 +0000
Manifest next update:     Sat 05 Jul 2025 09:36:35 +0000
Files and hashes:         1: 3133312e3130302e37322e302f32332d3233203d3e203631373536.roa (hash: VVZyjmnPEhB4/UoqE4uR1WwlyjcIZU8B+HO+mEVFe+0=)
                          2: 3133312e3130302e37342e302f32332d3233203d3e203631373536.roa (hash: 6FNuWOq1eHI5q3MgOqYyeE16Vv/YaJkuwv3MrFDS2IU=)
                          3: 323830343a316265383a383030303a3a2f33332d3333203d3e203631373536.roa (hash: Te1wIaLs970GrPtdJHvPfelk9mSSTu3aJper1pE/gLI=)
                          4: 3133312e3130302e37322e302f32322d3232203d3e203631373536.roa (hash: Kq1NYgqt7BBJXm6gv+qAVQNNtlsiDlad2EARZ4g408M=)
                          5: 06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl (hash: wTkYTey4x3V2kiAJLxrc/zzd7HRagDlj/m2MDnPUSGQ=)
                          6: 323830343a316265383a3a2f33332d3333203d3e203631373536.roa (hash: l78EKC9kkJuCz96yuwMWkw3iPI6l1+LN8zK/5aMvMYQ=)
                          7: 323830343a316265383a3a2f33322d3332203d3e203631373536.roa (hash: gjYR3lWRGiJJxuwH/+0i6Q87/18K+L4o4fePaKBOJ1w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl
                          rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:86:e2:f8:7d:d0:e2:94:22:0a:a7:53:90:61:4b:6a:b7:b4:6d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06CB8849D6F33431AF229D4C014E1E8DE068D9F9
        Validity
            Not Before: Jul  4 06:23:35 2025 GMT
            Not After : Jul  5 09:36:35 2025 GMT
        Subject: CN=DA7F8E3D52700B1444F7F5D5DBC50E41F5249864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:a4:19:b4:f6:0a:5c:d8:51:09:2d:27:06:
                    58:76:57:b2:78:00:7e:41:5b:41:66:cd:11:8a:83:
                    82:1d:3e:0e:ea:fc:55:6f:00:9e:35:20:7a:06:18:
                    cd:5e:64:d4:89:68:0b:fa:5c:8c:d0:a0:25:9b:6b:
                    9c:6a:fe:c1:7f:72:96:5f:ad:20:cc:3f:2c:83:06:
                    7c:45:d9:b9:a4:54:ea:fc:bf:0d:bf:5d:d7:70:f5:
                    a9:96:38:d1:5b:74:02:c0:ac:47:20:8a:3b:ee:f3:
                    38:9d:78:f6:5d:2b:f3:5f:a2:61:11:c7:20:96:7d:
                    f3:e7:17:6f:fd:5f:ff:58:74:12:aa:b0:59:8e:01:
                    5a:0a:0e:69:d5:bc:81:33:02:63:61:4e:3d:b7:ad:
                    d0:2c:6e:b0:8b:64:3d:5a:6a:95:78:69:29:2a:b6:
                    ff:a5:37:d6:a1:16:2c:d8:2e:05:4c:18:43:7b:79:
                    c7:ca:ba:53:8c:f6:5b:08:de:14:03:e3:50:f6:00:
                    e9:75:fb:d0:f8:4a:a7:5d:5e:7b:6c:6a:ee:90:c5:
                    d8:a1:82:23:0f:23:27:98:08:9d:b4:64:95:b6:58:
                    f5:1b:dd:d6:43:73:97:b4:3b:66:ef:ba:61:cc:57:
                    4a:13:d2:af:43:09:55:97:0d:b9:5a:e6:24:10:2e:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7F:8E:3D:52:70:0B:14:44:F7:F5:D5:DB:C5:0E:41:F5:24:98:64
            X509v3 Authority Key Identifier:
                keyid:06:CB:88:49:D6:F3:34:31:AF:22:9D:4C:01:4E:1E:8D:E0:68:D9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/06CB8849D6F33431AF229D4C014E1E8DE068D9F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3e:fe:b2:68:e2:c9:59:e7:e4:41:01:6f:42:6a:19:1f:c3:
         46:3c:45:ab:52:ea:af:d1:48:c9:b6:b6:b9:97:e4:42:b3:1d:
         e2:b6:4d:95:95:76:e8:ff:39:67:a3:a8:b8:a7:56:24:3e:0d:
         7e:c8:7a:49:0d:d0:32:35:78:7b:bb:3d:91:55:e6:34:9d:40:
         fe:7f:d4:0f:6c:f4:5f:6f:21:78:a2:31:ae:6a:f2:68:ec:0b:
         93:3d:11:64:f7:26:02:84:0a:c9:3c:94:c1:64:5b:8f:1a:ca:
         b9:e7:21:cc:c1:78:b6:2c:d9:9e:b2:fb:11:e6:36:98:cd:9a:
         3c:39:32:77:6c:1e:59:98:10:bc:4a:2d:8f:32:32:4c:78:d6:
         97:34:02:33:38:c4:1d:5d:c0:53:29:75:6c:43:68:ea:20:c4:
         c2:97:d8:40:b9:3b:eb:25:53:c6:49:45:39:25:7d:f7:90:29:
         8a:11:70:88:cb:a7:4f:e5:ce:e4:3d:9b:59:cc:85:e7:3f:61:
         ce:a6:68:42:86:19:eb:f2:d7:ec:52:13:8f:0e:d2:34:b8:58:
         ee:0d:c9:08:13:4c:6c:75:27:d1:71:07:fd:35:e6:a3:4d:ad:
         c9:e6:e1:ed:1f:df:91:2b:2a:a4:6b:fc:ea:e4:85:bb:be:46:
         71:fc:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:37:59 2025 by rpki-client